macOS Sierra unable to join Active Directory domain

Originator:tim
Number:rdar://27195724 Date Originated:Jul. 6 2016
Status:Open Resolved:
Product:OS X Product Version:16A239j
Classification:Serious Bug Reproducible:Always
 
Summary:
In both DP1 and DP2 of macOS Sierra, attempting to bind to Active Directory using an authorized account returns "Authentication failed."

Steps to Reproduce:
1. Open Users & Groups preference pane.
2. Click Login Options, and "Join" next to "Network Account Server."
3. Input the AD server hostname, and enter the user/passwword of an AD Admin user authorized to join the domain, and click OK.


Expected Results:
This user would be authenticated and the machine joined to the domain.


Actual Results:
An error is immediately shown: "Authentication failed. Please check the name and password and try again."

I'm attaching a sample of the log text from running `log stream --level debug --process opendirectoryd`:

2016-07-06 15:02:49.248358+0000 0x31850    Default     0x8000000000013f61   96     opendirectoryd: Client: <private>, UID: 600, EUID: 600, GID: 20, EGID: 20
2016-07-06 15:02:49.248421+0000 0x31850    Debug       0x8000000000013f61   96     opendirectoryd: created request: 20996
2016-07-06 15:02:49.248437+0000 0x31850    Debug       0x8000000000013f61   96     opendirectoryd: submitting request to internal pipeline
2016-07-06 15:02:49.248492+0000 0x31850    Default     0x8000000000013f61   96     opendirectoryd: disconnect module connection
2016-07-06 15:02:49.248642+0000 0x315f5    Default     0x8000000000013f61   96     opendirectoryd: ODNodeCreateWithNameAndOptions completed
2016-07-06 15:02:49.248824+0000 0x31850    Default     0x8000000000013f61   96     opendirectoryd: Client: <private>, UID: 600, EUID: 600, GID: 20, EGID: 20
2016-07-06 15:02:49.248862+0000 0x31850    Debug       0x8000000000013f61   96     opendirectoryd: created request: 20997
2016-07-06 15:02:49.248890+0000 0x31850    Debug       0x8000000000013f61   96     opendirectoryd: submitting request to internal pipeline
2016-07-06 15:02:49.249607+0000 0x31850    Default     0x8000000000013f61   96     opendirectoryd: ODNodeCopyDetails completed, delivered 1 result
2016-07-06 15:02:49.250534+0000 0x315f5    Default     0x0                  96     opendirectoryd: Client: <private>, UID: 600, EUID: 600, GID: 20, EGID: 20
2016-07-06 15:02:49.250579+0000 0x315f5    Debug       0x0                  96     opendirectoryd: created request: 20998
2016-07-06 15:02:49.250618+0000 0x315f5    Debug       0x0                  96     opendirectoryd: submitting request to internal pipeline
2016-07-06 15:02:49.251291+0000 0x31850    Default     0x0                  96     opendirectoryd: ODNodeCopyDetails completed, delivered 1 result
2016-07-06 15:02:49.256203+0000 0x31877    Default     0x0                  96     opendirectoryd: Client: <private>, UID: 600, EUID: 600, GID: 20, EGID: 20
2016-07-06 15:02:49.256261+0000 0x31877    Debug       0x0                  96     opendirectoryd: created request: 20999
2016-07-06 15:02:49.256317+0000 0x31877    Debug       0x0                  96     opendirectoryd: submitting request to internal pipeline
2016-07-06 15:02:49.256423+0000 0x315f5    Default     0x0                  96     opendirectoryd: initiating reconnect of module connection
2016-07-06 15:02:49.256556+0000 0x31850    Default     0x0                  96     opendirectoryd: ODNodeCreateWithNameAndOptions completed
2016-07-06 15:02:49.256799+0000 0x315f5    Default     0x0                  96     opendirectoryd: Client: <private>, UID: 600, EUID: 600, GID: 20, EGID: 20
2016-07-06 15:02:49.256844+0000 0x315f5    Debug       0x0                  96     opendirectoryd: created request: 21000
2016-07-06 15:02:49.256868+0000 0x315f5    Debug       0x0                  96     opendirectoryd: submitting request to internal pipeline
2016-07-06 15:02:49.257937+0000 0x31850    Activity    0x8000000000013e9b   96     opendirectoryd: (SystemConfiguration) accessing SCDynamicStore
2016-07-06 15:02:49.258569+0000 0x31850    Activity    0x8000000000013e9c   96     opendirectoryd: (SystemConfiguration) accessing SCDynamicStore
2016-07-06 15:02:49.261832+0000 0x31850    Activity    0x8000000000013e9d   96     opendirectoryd: (SystemConfiguration) accessing SCDynamicStore
2016-07-06 15:02:49.264787+0000 0x31850    Activity    0x8000000000013e9e   96     opendirectoryd: (SystemConfiguration) accessing SCDynamicStore
2016-07-06 15:02:49.267984+0000 0x31850    Activity    0x8000000000013e9f   96     opendirectoryd: (SystemConfiguration) accessing SCDynamicStore
2016-07-06 15:02:49.270820+0000 0x31850    Activity    0x8000000000013f80   96     opendirectoryd: (SystemConfiguration) accessing SCDynamicStore
2016-07-06 15:02:49.273854+0000 0x31850    Activity    0x8000000000013f81   96     opendirectoryd: (SystemConfiguration) accessing SCDynamicStore
2016-07-06 15:02:49.276642+0000 0x31850    Activity    0x8000000000013f82   96     opendirectoryd: (SystemConfiguration) accessing SCDynamicStore
2016-07-06 15:02:49.279199+0000 0x31850    Activity    0x8000000000013f83   96     opendirectoryd: (SystemConfiguration) accessing SCDynamicStore
2016-07-06 15:02:49.281822+0000 0x31850    Activity    0x8000000000013f84   96     opendirectoryd: (SystemConfiguration) accessing SCDynamicStore
2016-07-06 15:02:49.284702+0000 0x31850    Activity    0x8000000000013f85   96     opendirectoryd: (SystemConfiguration) accessing SCDynamicStore
2016-07-06 15:02:49.287514+0000 0x31850    Activity    0x8000000000013f86   96     opendirectoryd: (SystemConfiguration) accessing SCDynamicStore
2016-07-06 15:02:49.290493+0000 0x31850    Default     0x0                  96     opendirectoryd: ODNodeCustomCall failed with error 'Invalid credentials' (5000)

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!